Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30-12-2023 21:57
General
-
Target
1dc805656d656c88af4040d12e7052ec.exe
-
Size
24KB
-
MD5
1dc805656d656c88af4040d12e7052ec
-
SHA1
a6a707ab84adbe687c2811e32e06dc5dee4c2e5c
-
SHA256
3df542a6a7bd775fb6c16de53ce4284fdfdf02bc62da8411b2c85402784cc115
-
SHA512
273d03c53ff074f2cc803a9c9ef4df779c77531c49173ab5709a430059a39d9601a5b2a2fb8c98562b3245c41666fb1bb7876b01cda0a1293076b140969b33ed
-
SSDEEP
768:bXbjKOsXm17StbcizbcYYZs34qsquDyQ0ButhpWQ:bLjrKWmtbDTasIqsXyQxhp9
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Modifies registry class 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1dc805656d656c88af4040d12e7052ec.exe"C:\Users\Admin\AppData\Local\Temp\1dc805656d656c88af4040d12e7052ec.exe"1⤵
- Loads dropped DLL
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
MD56c0b907a0ad0c6ead6a9cff69a04f15c
SHA1727c7b96e0880d9a881038fd107b9c26db6327b9
SHA256cc4c95bdae1a748379a5827e06812c9a4f8a833165e2d87ff6f63a5e9b6526e8
SHA5122447b2367d4710e64d1d4f6bb2667e6e56a7ea30f981d31b1376072b1ac367b8ae09493a5925d45ff7047208ff0ce32d65d552fc11b94c7b772213f7be49d44e
-
Filesize
96KB
-
Filesize
72KB
-
Filesize
96KB
-
Filesize
72KB